JBoss development, A new message was posted in the thread "EJB3 security - Skip authorization for @PermiAll?": http://community.jboss.org/message/531683#531683 Author : jaikiran pai Profile : http://community.jboss.org/people/jaikiran Message: -------------------------------------------------------------- This specific RoleBasedAuthorizationInterceptorv2 will just skip authorization. Authentication will (and rightly should) continue happening for a bean marked with @PermitAll. -------------------------------------------------------------- To reply to this message visit the message page: http://community.jboss.org/message/531683#531683